Effective May 20, 2026
Privacy Policy
Spellshape is an open-source, bring-your-own-key 3D authoring app. We do not require accounts, subscriptions, or signups to use the app.
What We Collect
When you use the hosted app, Spellshape may process the prompts, chat history, reference images, screenshots, Live OBJ scene data, model settings, provider endpoints, and API key you submit so the app can generate or edit your scene.
If you enable "Remember provider settings on this device," those provider settings, including your API key, are stored in your browser's local storage on that device. If you do not enable it, the app keeps those settings only in the current browser session state.
Our hosting provider may collect ordinary operational logs such as IP address, user agent, request time, route, status code, and error diagnostics. Spellshape does not use these logs to create user profiles.
How Requests Work
Spellshape sends generation requests from your browser to Spellshape server routes. Those routes forward the request content and your API key to the AI provider and endpoint you selected. Your API key is used as a credential for that provider request and is not intentionally stored by Spellshape on our servers.
How We Use Information
We use submitted information to provide app functionality, generate and edit Live OBJ scenes, render image previews when requested, debug errors, protect the service, and maintain the project.
Third Parties
Your selected AI provider receives the request content needed to perform the generation or image operation. That provider's own terms and privacy policy govern its handling of your API key, prompts, images, outputs, and usage. Our hosting provider may process operational logs to run the hosted app.
What We Do Not Do
- We do not sell personal information.
- We do not run behavioral advertising.
- We do not require user accounts.
- We do not intentionally store your API key on Spellshape servers.
Your Controls
You can clear provider settings from the Provider tab, clear site data in your browser, remove your API key from the app, or use a self-hosted copy of the open-source project. You can also revoke or rotate API keys through your AI provider.
Children
Spellshape is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
Changes
We may update this policy as the app changes. The effective date above shows when this version took effect.
Contact
For privacy questions, contact the maintainers through the Spellshape GitHub repository.